Become certified AWS Cloud Practitioner - 5th meeting (online)

Slides from our 5th AWS User Group Bosnia (Mostar) meeting about AWS Cloud Practitioner certification.
https://www.meetup.com/AWS-User-Group-Bosnia/events/266072877/

Transcript

1. Become certified AWS Cloud Practitioner - 5th meeting (online) AWS User Group Bosnia (Mostar) 03.11.2019.
2. Agenda • Security and compliance • AWS Billing and Support Services
3. Shared Responsibility Model
4. DDoS and Penetration Testing (Allowed) • Dozvoljeno testiranje nad sljedecim servisima: • EC2, NAT Gateways,ELB • RDS, including Aurora • CloudFront • API Gateways • AWS Labmda • ElasticBeanstalk • Lightsail
5. DDoS and Penetration Testing (Not Allowed) • Nije dozvoljeno testiranje nad sljedecim servisima: • Route 53 • Port flooding • Protocol flooding • Request flooding https://aws.amazon.com/security/penetration-testing/
6. AWS Security Related Services • AWS Organizations – Centralno mjesto za menadzment AWS racuna i placanja.
7. Amazon GuardDuty • Servis koji koristi ML da bi detektova prijetnje unutar AWS racuna na osnovu analize razlicitih logova
8. Amazon Inspector • Analizira VPC okruzenje kako bi detektovao potencijalne sigurnosne probleme. • Predlaze korake kako bi se ti problemi otklonili
9. AWS Shild • Omogucava zastitu od DDoS napada • Dvije vrste AWS Shild-a: • Standard (dostupan svim AWS korisnicima bez naknade) • Advanced
10. AWS Web Application Firewall (WAF) • Nadzire web saobracaj preusmjeren od strane ELB, CloudFronta ili API Gateway-a • Na osnovu definisanih pravila moze da dozvoli ili odbije pristup sadrzaju AWS Artifact service
11. AWS Key Management Service • Omogucava enkripciju podataka • Centralizovano mjesto za pohranu kljuceva • Moze se koristiti za enkripciju unutar aplikacije ili podataka pohranjenih unutar AWS-a • Mozete generisati kljuceve unutar KMS-a ili importovati vlastite kljuceve • Integrise se sa ostalim AWS servisima (S3, EBS, RDS, SNS etc)
12. Summary • Shared Responsibility Model • DDoS • AWS Security Services
13. AWS Billing • AWS Organizations – "policy based management for multiple AWS accounts" • Consolidate billing
14. AWS Pricing Model • Pay as you go – Placate za ono sto koristiti, kad koristite • Volume discounts – Sto vise koristite manje placate • Free Tier
15. AWS Pricing Model • Pay as you go – Placate za ono sto koristiti, kad koristite • Volume discounts – Sto vise koristite manje placate • Free Tier https://aws.amazon.com/free/
16. AWS Pricing Storage Service (S3) • Koliko podataka ste pohranili • Naplacuje se po GB • Cijena varira u zavisnosti od regije Request Pricing (in/out of S3) • PUT, POST, LIST, GET • Data retrieval, data archive, data restore
17. EC2 Pricing • On-Demand, Reserved, Spot • Instance Type • AMI Type (Windows / Linux) • Region
18. Calculators • AWS Total Cost of Ownership (TCO) Calculator - Alat koji vam omogucava da predvidite troskove migracije na AWS sa on-prem infrastrukture https://awstcocalculator.com/ • AWS Pricing calculator https://calculator.aws/#/ • Cost Explorer
19. AWS Support Plans • Basic – ukljucen u AWS racun • Developer – od 29 $/month • Business – od 100 $/month • Enterprise – od 15000 $/mjesecno https://aws.amazon.com/premiumsupport/plans/
20. AWS Trusted Advisor • Servis koji vam pomaze i daje prijedloge kako da smanjite troskove unaprijedite sigurnost u skladu sa najboljim AWS praksama • Pomaze vam sa: • Optimizacijom troskova • Perfromansama • Sigornoscu • Otpornost na greske (Fault Tolerance) • Zavisi od nivoa podrske za Vas AWS racun (Basic, Developer, Business or Enterprise)
21. Q&A